PUBLISHED
2026-05-20 22:16
MODIFIED
2026-05-20 22:16
EPSS (Prob. Exploit)
0.40%
Top 66.1%
> DESCRIPTION
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.
These versions use the built-in rand function, which is predictable and unsuitable for cryptography.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts
AFFECTED PACKAGES:
Unknown / Unknown
6 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
20/05/2026 22:16
Source: NVD
📊
ENRICHISSEMENT
01/06/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) - The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptogra...
Total des modifications: 1
Dernière mise à jour: 5 months ago